Hi,

I have a client that wants me to NAT my subnet (10.1.1.0/24) using
192.168.51.50.

My gateway is the same box that does the vpn tunnel.

 

When I try to NAT the packets, linux doesn’t send it through the tunnel.
It sends it unencrypted to the internet.

When I change my subnet in my ipsec.conf and I delete the NAT rule, the
packets go through the tunnel.

The problem is that the client wants me to do NAT.

 

I there a way to SNAT a packet and then send it through the tunnel all
on the same box?

 

 

Thanks,

Eyal.


